1889 matches found
MAL-2025-6324 Malicious code in vis-donut-chart (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in vis-donut-chart (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6323 Malicious code in vercel-internals (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6315 Malicious code in teamstelemetry (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7838b0f51882af6cd99758551eec942e5c2abcd214ebe7c1e8b3c59dbece4224 The OpenSSF Package Analysis project identified 'teamstelemetry' @...
MAL-2025-6221 Malicious code in creditorwatch (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8e512b66a32adafac8cde5bf65b57c17c80568658cec0a3a723b1cf9f5a46e2 Any computer that has this package installed or running should be considered...
MAL-2025-6293 Malicious code in marcom-ac-analytics (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6269 Malicious code in @wptv/player (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6270 Malicious code in @wptv/seo (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6271 Malicious code in @wptv/stats (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6268 Malicious code in @wptv/navik (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6267 Malicious code in @wptv/logger (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6120 Malicious code in pro-stocks-widget (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6072 Malicious code in anchor5 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8d44079a1abc61c092193be41f21fe5d45b1f7231f539e42efbef50278baa80 The OpenSSF Package Analysis project identified 'anchor5' @ 1.2.0 npm...
MAL-2025-6130 Malicious code in spring-tx (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb59e10d8881abf3b2dc67ba4e148293566cd2978a32ebb3f07008e91ba5952 Any computer that has this package installed or running should be considered...
MAL-2025-6111 Malicious code in okx-dex (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6131 Malicious code in telenet (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6076 Malicious code in chime-ci-helper (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 280ad6fead53ce916eb475c521931d23da0e7ef62e5a88845facf02492123707 Any computer that has this package installed or running should be considered...
MAL-2025-6115 Malicious code in paypal-examples-langchain (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8aabcced92aa935f39ef4e66942764d799e0d1ca4e87baffe59fd8fad22ac10 Any computer that has this package installed or running should be considered...
MAL-2025-6213 Malicious code in donotinstallthisistest6 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 272225f1adba5810796fd9c194041e72e5fcdcc032fa296a701bcc480b37bfcb Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6098 Malicious code in indexer-worker-service (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac1787e896bcd8c295f599ea997c10b250926208aa47d4407a3b796c4033e349 Any computer that has this package installed or running should be considered...